Crypto Manager Kmip Update Kms Signed Csr Client Cert

Set KMS server signed certificate as KMIP client certificate for the KMS cluster.

This method should be called to update the certificate signed by KMS server from a CSR that is generated by calling GenerateClientCsr. If GenerateClientCsr is called more than once, the CSR that is generated last time should be used; otherwise the certificate will be rejected because the private key from last time won't match the public key in the certificate.

Required privileges: Cryptographer.ManageKeyServers

Request

URI

POST

https://{vcenter-host}/sdk/vim25/{release}/CryptoManagerKmip/{moId}/UpdateKmsSignedCsrClientCert

COPY

Path Parameters

string

moId

Required

The unique identifier for the managed object to which the method attaches; the serialized managed object reference for a request has the form moType/moId, in this case CryptoManagerKmip/{moId}.

string

release

Required

The vSphere release schema. The current specification covers vSphere 8.0.2.0 APIs.

Request Body

UpdateKmsSignedCsrClientCertRequestType of type(s) application/json

Required

{
    "cluster": {
        "id": "string"
    },
    "certificate": "string"
}

KeyProviderId

cluster

Required

Data Object representing a crypto key provider's unique identifier.

string

certificate

Required

[in] Client certificate.

Authentication

This operation uses the following authentication methods.

Session

Responses

204

No Content

Operation doesn't return any data structure

On This Page

Description

Request

Path Parameters

Request Body

Authentication

Response

204 Response Body

Crypto Manager Kmip Operations